Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
212971	10	危険	IBM アップルサン・マイクロシステムズオラクル日立レッドハット	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5789	2015-03-17 17:59	2013-10-15	Show	GitHub Exploit DB Packet Storm

212972	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5787	2015-03-17 17:59	2013-10-15	Show	GitHub Exploit DB Packet Storm

212973	6.4	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Swing に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5783	2015-03-17 17:59	2013-10-15	Show	GitHub Exploit DB Packet Storm

212974	10	危険	アップルサン・マイクロシステムズ日立 IBM オラクル	-	複数の Oracle Java 製品における 2D に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5782	2015-03-17 17:59	2013-10-15	Show	GitHub Exploit DB Packet Storm

212975	4.3	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	複数の Oracle Java 製品における Libraries に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5780	2015-03-17 17:59	2013-10-15	Show	GitHub Exploit DB Packet Storm

212976	5	警告	アップルサン・マイクロシステムズ日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における 2D に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5778	2015-03-17 17:59	2013-10-15	Show	GitHub Exploit DB Packet Storm

212977	7.6	危険	レッドハット日立オラクル	-	Oracle Java SE における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0387	2015-03-17 17:57	2014-01-14	Show	GitHub Exploit DB Packet Storm

212978	5.8	警告	レッドハット日立オラクル	-	Oracle Java SE における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0375	2015-03-17 17:56	2014-01-14	Show	GitHub Exploit DB Packet Storm

212979	7.5	危険	レッドハット日立オラクル	-	Oracle Java SE における Serviceability に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0373	2015-03-17 17:56	2014-01-14	Show	GitHub Exploit DB Packet Storm

212980	5	警告	レッドハット日立 IBM オラクル	-	Oracle Java SE および Java SE Embedded における Networking に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0368	2015-03-17 17:54	2014-01-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
2231	4.6	MEDIUM Network	-	-	HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.	CWE-863 Incorrect Authorization	CVE-2026-21789	2026-05-19 05:23	2026-05-19	Show	GitHub Exploit DB Packet Storm

2232	8.2	HIGH Local	-	-	Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.	CWE-346 Origin Validation Error	CVE-2026-46728	2026-05-19 05:23	2026-05-17	Show	GitHub Exploit DB Packet Storm

2233	4.6	MEDIUM Local	-	-	Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control characters or encoding embedded…	CWE-150 Improper Neutralization of Escape, Meta, or Control Sequences	CVE-2026-47090	2026-05-19 05:19	2026-05-19	Show	GitHub Exploit DB Packet Storm

2234	3.3	LOW Local	-	-	Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated transcript_path value via stdin…	CWE-22 Path Traversal	CVE-2026-47091	2026-05-19 05:19	2026-05-19	Show	GitHub Exploit DB Packet Storm

2235	7.8	HIGH Local	-	-	Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment vari…	CWE-427 Uncontrolled Search Path Element	CVE-2026-47092	2026-05-19 05:19	2026-05-19	Show	GitHub Exploit DB Packet Storm

2236	9.8	CRITICAL Network	-	-	iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode object. Attackers can retr…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2020-37228	2026-05-19 05:16	2026-05-17	Show	GitHub Exploit DB Packet Storm

2237	7.8	HIGH Local	-	-	Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by exploiting the service startup process. Atta…	CWE-428 Unquoted Search Path or Element	CVE-2020-37231	2026-05-19 05:16	2026-05-17	Show	GitHub Exploit DB Packet Storm

2238	9.8	CRITICAL Network	-	-	libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks. Attackers can call babl_…	CWE-415 Double Free	CVE-2020-37239	2026-05-19 05:16	2026-05-17	Show	GitHub Exploit DB Packet Storm

2239	9.8	CRITICAL Network	-	-	python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containing py/repr objects. …	CWE-94 Code Injection	CVE-2021-47952	2026-05-19 05:16	2026-05-17	Show	GitHub Exploit DB Packet Storm

2240	7.8	HIGH Local	-	-	OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by inserting executable files into the unqu…	CWE-428 Unquoted Search Path or Element	CVE-2020-37229	2026-05-19 05:16	2026-05-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed